Return-Path: Received: (qmail 20876 invoked from network); 1 Dec 2001 03:26:07 -0000 Received: from unknown (HELO warrior.services.quay.plus.net) (212.159.14.227) by excalibur.plus.net with SMTP; 1 Dec 2001 03:26:07 -0000 X-Priority: 3 X-MSMail-Priority: Normal Received: (qmail 17202 invoked from network); 1 Dec 2001 03:26:04 -0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Received: from unknown (HELO post.thorcom.com) (212.172.148.70) by warrior.services.quay.plus.net with SMTP; 1 Dec 2001 03:26:04 -0000 Received: from majordom by post.thorcom.com with local (Exim 3.33 #2) id 16A0l9-0006rt-00 for rsgb_lf_group-outgoing@blacksheep.org; Sat, 01 Dec 2001 03:24:11 +0000 Received: from imo-m05.mx.aol.com ([64.12.136.8]) by post.thorcom.com with esmtp (Exim 3.33 #2) id 16A0l8-0006ro-00 for rsgb_lf_group@blacksheep.org; Sat, 01 Dec 2001 03:24:10 +0000 Received: from WarmSpgs@aol.com by imo-m05.mx.aol.com (mail_out_v31_r1.9.) id l.4f.153b36c9 (4242) for ; Fri, 30 Nov 2001 22:23:20 -0500 (EST) From: WarmSpgs@aol.com Message-ID: <4f.153b36c9.2939a727@aol.com> Date: Fri, 30 Nov 2001 22:23:19 EST Subject: Re: LF: Re: strange message...please check To: rsgb_lf_group@blacksheep.org MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 8bit X-Mailer: AOL 4.0 for Windows 95 sub 120 Precedence: bulk Reply-To: rsgb_lf_group@blacksheep.org X-Listname: rsgb_lf_group Sender: In a message dated 11/30/01 4:01:26 AM Eastern Standard Time, dsergeant@connectfree.co.uk writes: << Note also that the email address of the sender is prefixed by an underscore _ so that dsergeant@btinternet.com appears as _dsergeant@btinternet.com. Possibly one could set up a filter using this. >> In a sort of good news/bad news irony. The good news is, the leading underscore is the very fact means this reflector won't forward such messages to us. The bad news is, this virus not only steals names from the infected mailbox, it also steals subject lines...so it can make the message appear at first glance as if it came from a reply to the reflector. The precautions Dave outlined are very sensible. 73, John